volcengine-sale
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and installs tools from Volcengine's official GitHub repositories (e.g., github.com/volcengine/ark-cli and github.com/volcengine-tls/ve-tls-cli) when required products are not pre-installed. These operations are performed only after explicit user authorization.
- [COMMAND_EXECUTION]: The skill executes shell commands using the
ve(Volcengine CLI) tool to perform billing actions andgitfor dependency management. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided product names and purchase intents to route requests through a lookup table.
- Ingestion points: User intent strings parsed in
SKILL.md. - Boundary markers: Relies on predefined keyword matching rules defined in
references/product-rule.md. - Capability inventory: CLI execution (
ve billing CommonBuy), file reading/writing, and automated tool installation viagit. - Sanitization: Implements a mandatory human-in-the-loop confirmation step, displaying the full command to the user before any purchase execution.
- [DYNAMIC_EXECUTION]: The skill dynamically assembles shell commands for the Volcengine CLI using product configuration data stored in local reference files (e.g.,
references/tos.md). Execution is gated by explicit user approval.
Audit Metadata